cbcvebase.
CVE-2012-4960
published 2013-06-20

CVE-2012-4960: The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300…

medium6.5CVSS 3.1
AVNACLAuSCPIPAP
EXPLOIT
The Huawei NE5000E, MA5200G, NE40E, NE80E, ATN, NE40, NE80, NE20E-X6, NE20, ME60, CX600, CX200, CX300, ACU, WLAN AC 6605, S9300, S7700, S2300, S3300, S5300, S3300HI, S5300HI, S5306, S6300, S2700, S3700, S5700, S6700, AR G3, H3C AR(OEM IN), AR 19, AR 29, AR 49, Eudemon100E, Eudemon200, Eudemon300, Eudemon500, Eudemon1000, Eudemon1000E-U/USG5300, Eudemon1000E-X/USG5500, Eudemon8080E/USG9300, Eudemon8160E/USG9300, Eudemon8000E-X/USG9500, E200E-C/USG2200, E200E-X3/USG2200, E200E-X5/USG2200, E200E-X7/USG2200, E200E-C/USG5100, E200E-X3/USG5100, E200E-X5/USG5100, E200E-X7/USG5100, E200E-B/USG2100, E200E-X1/USG2100, E200E-X2/USG2100, SVN5300, SVN2000, SVN5000, SVN3000, NIP100, NIP200, NIP1000, NIP2100, NIP2200, and NIP5100 use the DES algorithm for stored passwords, which makes it easier for context-dependent attackers to obtain cleartext passwords via a brute-force attack.

Affected

107 ranges· showing 25
VendorProductVersion rangeFixed in
huaweiacu
huaweiacu
huaweiacu
huaweiar_19_29_49<= r2207
huaweiar_g3
huaweiar_g3
huaweiar_g3
huaweiatn
huaweiatn
huaweicx200
huaweicx300
huaweicx600
huaweicx600
huaweicx600
huaweicx600
huaweie200_usg2200<= v200r003c00
huaweie200_usg5100<= v200r003c00
huaweie200e-b<= v100r005c01
huaweie200e-c<= v200r003c00
huaweie200e-usg2100<= v100r005c01
huaweie200e-x1<= v100r005c01
huaweie200e-x2<= v100r005c01
huaweie200x3<= v200r003c00
huaweie200x5<= v200r003c00
huaweie200x7<= v200r003c00